Everyone I talk to about autonomous agents has the same two fears, and they're both justified:

The loop runs away. You give an agent a goal, it starts iterating, and it either burns

your API budget at 3am or cheerfully does the wrong thing forty times in a row.

The access problem. For an agent to do real work it needs your internal APIs — billing,

inventory, the admin service that has no auth story because it was never supposed to leave